Application Serial No.: 10/074,583 
Amendment and Response to November 29, 2005 Non-Final Office Action 

AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1. (Currently amended) A computer-implemented method for managing risk 
related to a security risk event, the method comprising: 

receiving information relating to a particular security risk event; 

structuring processing, bv a computer, t he information received accord i ng t o 
associate the received information with risk variable s related to the particular security 
risk event : and 

calculating a security level using the structured processed information and a set 
of relationships established between the risk variables. 

2. (Currently amended) The method of claim 1 wherein the security level 
comprises an indication of an amount of risk that a breach of security may occur 
relating to the particular security risk event. 

3. (Currently amended) The method of claim 1 wherein the security level 
comprises a security confidence level indicative of how secure a particular facility can 
be made relative to a -the p articular security risk event. 

4. (Currently amended) The method of claim 1 wherein the security level 
comprises a security confidence level can b e i nd i cat i vo of how secure a particular 
practice can be made relative to a -the p articular security risk event. 

5. (Currently amended) The method of claim 1 wherein the security level 
comprises a security maintenance level indicative of a level of security that should be 
maintained in relation to an ana l yz e d t he particular security risk event. 
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6. (Currently amended) The method of claim 1 additionally comprising the 
step of: 

generating a suggested security measure according to the security level and 
structured processed information. 

7. (Original) The method of claim 6 additionally comprising the step of: 

storing the information received, the security level and the suggested security 
measure. 

8. (Original) The method of claim 6 additionally comprising the step of: 
receiving information relating to security measures executed; and 
generating a security diligence report. 

9. (Currently amended) The method of claim 8 wherein the security diligence 
report comprises inquiries made relating to the particular s ecurity risk event and security 
measures executed responsive to the security level. 

1 0. (Currently amended) The method of claim 6 wherein the suggested 
security measure comprises physical protection of media containing information relating 
to th o transaction particular security risk event . 

1 1 . (Currently amended) The method of claim 46,, wherein the suggested 
security measure comprises physical protection of a facility associated with the 
particular s ecurity ris k event . 

1 2. (Currently amended) The method of claim 46^. wherein the wherein the 
suggested security measure comprises physical protection of a building associated with 
a business transaction. 

1 3. (Currently amended) The method of claim 46^. wherein the suggested 
action comprises notifying an authority regarding a_potential breach of security. 
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14. The method of claim 6 additionally comprising the step of: 

branding the suggested security measure according to the set of relationships 
between the risk variables. 

15. (Original) The method of claim 1 wherein level of analysis utilized in 
the calculation of the security level is rated according to a classification. 

16. (Currently amended) The method of claim 1 wherein the calculation 
comprises a level of weighting associated with a category of risk variables. 

17. (Currently amended) The method of claim 1 wherein the calculation 
comprises aggregating multiple weightings of the risk variables. 

18. (Currently amended) The method of claim 1 wherein the calculation 
comprises a relationship algorithm that determines which of the risk v ariables offoct 
affects o thers of the risk v ariables. 

19. (Currently amended) The method of claim 1 wherein the calculation 
includes a relationship algorithm comprising how data comprising including a first 
variable can effect -affect a weighting for a second variable. 

20. (Original) The method of claim 1 additionally comprising the step of: 
recalculating the security level responsive to new information received. 

21 . (Currently amended) The method of claim 1 additionally comprising the 
step of: 

recalculating the security level responsive to progression of a chronology of 
particular security risk e vents. 

22. (Currently amended) A computerized system for managing risk related to a 
particular security risk event, the system comprising: 
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a computer server accessible with a system access device via a communications 
network; and 

executable software stored on the server and executable on demand, the 
software operative with the server to cause the system to: 

receive information relating to a -the particular s ecurity risk event; 

structure the information received according to risk variables; and 

calculate a security level using the structured information and a set of 
relationships established between the risk variables. 

23. (Original) The computerized system of claim 22 wherein the data is 
gathered via an electronic feed. 

k 24. (Currently amended) Comput e r e x e cutab le program code r e siding on a A 
computer-readable medium having computer executable program instructions residing 
thereon , the computer-readable medium p rogram codo comprising i nstruct i ons for 
caus i ng th e comput e r to : 

instructions to receive information relating to a particular s ecurity risk event; 

instructions to structure the information received according to risk variables; and 

instructions to calculate a security level using the structured information and a 
set of relationships established between the risk variables. 

25 - 28.(Canceled) 
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